Unspecified Vulnerability in Sonatype Nexus Repository Manager IQ

Sonatype Nexus Repository Manager IQ is a Sonatype open source application. The policy management and component intelligence features for IQ Server are integrated with the agent repository in Nexus Repository Manager Pro. A security vulnerability exists in Sonatype Nexus Repository Manager IQ. An...

Sonatype Nexus Repository Manager Pro Incorrect Access Control Vulnerability

Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...

CVE-2021-29158

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control...

CVE-2021-29158

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control...

CVE-2021-29158

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control...

Improper access control

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control...

CVE-2021-29158

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control...

CVE-2021-29158

The connected sources describe CVE-2021-29158 as an Incorrect Access Control issue in Sonatype Nexus Repository Manager Pro up to and including 3.30.0 . The vulnerability reportedly allows an attacker to obtain sensitive information (per CNVD/PRION/Red Hat entries). No technical exploit details, ...

Sonatype Nexus Repository Manager IQ 路径遍历漏洞

Sonatype Nexus Repository Manager IQ is a Sonatype open source application. The policy management and component intelligence features for IQ Server are integrated with the agent repository in Nexus Repository Manager Pro. A security vulnerability exists in Sonatype Nexus Repository Manager IQ. An...

Sonatype Nexus Repository Manager 跨站脚本漏洞

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A cross-site scripting vulnerability exists in Nexus Repository Manager version 3.x prior to 3.30.1, which can be exploited by an attacker...

Sonatype Nexus Repository Manager 安全漏洞

Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...

Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability (cisco-sa-3000-9000-fileaction-QtLzDRy2)

According to its self-reported version, Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode are affected by a vulnerability in the implementation of an internal file management service. An unauthenticated, remote attacker could...

The vulnerability of the NX-OS operating system in ACI Mode allows a hacker to bypass security checks and connect an unauthorized server to the VLAN infrastructure.

The vulnerability of the NX-OS operating system in ACI Mode is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass security checks and connect unauthorized servers to the VLAN infrastructure...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in the internal file management service of the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches allows a attacker to rewrite arbitrary files.

The vulnerability of the internal file management service in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches lies in the use of files and directories accessible from external parties. Exploiting this vulnerability allows a malicious actor...

The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system for Cisco routers allows a attacker to cause a service failure.

The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system’s Cisco routers is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

Cisco Releases Security Patches for Critical Flaws Affecting its Products

Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure ACI Multi-Site Orchestrator MSO that could allow an unauthenticated, remote attacker to bypass authentication on vulnerable devices. "An attacker could exploit this vulnerability by sending a crafted...

Cisco Warns of Critical Auth-Bypass Security Flaw

A critical vulnerability in Cisco Systems’ intersite policy manager software could allow a remote attacker to bypass authentication. The vulnerability is one of three critical flaws fixed by Cisco on this week. It exists in Cisco’s ACI Multi-Site Orchestrator ACI MSO — this is Cisco’s management...

Nexus Series Fabri Access Control Error Vulnerability

Cisco Nexus 9000 Series Fabric Switches is a 9000 series fiber optic switch from Cisco USA. A security vulnerability exists in the Nexus 9000 Series Fabri that can be exploited by an attacker to disable switching on SFP interfaces, which could disrupt the network...

Vulnerabilities fixed in Cisco NX-OS

Vulnerabilities have been fixed in NX-OS. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Denial-of-Service DoS. Manipulation of data Cisco categorizes these vulnerabilities according to the CVSSv3...